pen-testing

Which of these scripting languages is more appropriate for pen-testing?

First of all, I want to avoid a flame-war on languages. The languages to choose from are Perl, Python and Ruby . I want to mention that I'm confortable with all of them, but the problem is that I can't focus just on one. If for example , I see a cool Perl module, I have to try it out. If I see a nice Python app, I have to know how it's...

C# - a userland TCP stack in Windows XP SP III

Hi! I'm trying to create an application to craft packets to be able to debug some gateways here, and to experiment with TCP DoS situations. Nevertheless this should be very easy, I didn't find a way to implement this for a Windows application. I started using Impacket from Core Security in Python on a Unix box, but I want to avoid thi...

Pen testing your MVC application

Here are some the commonly known practices for securing an MVC application: Encode your output Parameterize your SQL Test your search backwards and forward 1 way hash passwords Lock out accounts or limit login attempts Use code based impersonation when accessing the file system Access SQL with a locked down username Use Honey-pots or c...

What do you think of a language dedicated to Linux admin and pen testing?

Hi all, I've recently started developing a new scripting language. It uses a single interpreter and so far works pretty well. It's a mixture of C, C#, Ruby, Python, Perl and even some PHP. Normally I wouldn't have bothered with such an idea, but to make pen testing and linux administration easier I just had to. All of the above language...